Skip to content
OpenAdvisories

Archive

August 2025

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-57819 Exploited Public exploit Scanner template EPSS 95%

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulatio…

    KEV Aug 29, 2025
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    KEV Aug 26, 2025
  • Critical 10.0
    CVE-2025-43300 Exploited Public exploit EPSS 63%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS …

    KEV Aug 21, 2025
  • Critical 9.4
    CVE-2025-8875 Exploited Public exploit

    Insecure Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

    KEV Aug 13, 2025
  • Critical 10.0
    CVE-2025-54253 Exploited Public exploit EPSS 81%

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of …

    KEV Oct 15, 2025